Lucene search
+L

35 matches found

attackerkb
attackerkb
•added 2026/05/27 9:49 a.m.•16 views

CVE-2026-42738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-42738: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•6 views

CVE-2026-42746: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.3CVSS5.8AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-42745: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.3CVSS5.8AI score0.00401EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•26 views

PT-2026-43650

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/16 7:22 p.m.•15 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/15 5:17 p.m.•27 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS0.00107EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 3:49 p.m.•6 views

CVE-2025-15635

Cross-Site Request Forgery CSRF vulnerability in Zaytech Smart Online Order for Clover allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/15 12:00 a.m.•1 views

CVE-2025-15635: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

4.3CVSS5.8AI score0.00107EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•28 views

PT-2026-33079

Name of the Vulnerable Software and Affected Versions Smart Online Order for Clover versions n/a through 1.6.0 Description A Cross-Site Request Forgery CSRF flaw allows an attacker to induce a user to perform actions they did not intend to do. Recommendations At the moment, there is no informatio...

4.3CVSS5.2AI score0.00107EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-26154

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:49 a.m.•28 views

CVE-2024-43253

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

9.8CVSS5.9AI score0.00617EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:00 a.m.•24 views

CVE-2024-29115

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zaytech Smart Online Order for Clover allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...

6.5CVSS8.6AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:40 a.m.•17 views

CVE-2024-31238

Cross-Site Request Forgery CSRF vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5...

8.8CVSS8.5AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•38 views

CVE-2024-43253

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

9.8CVSS0.00617EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/01 3:15 p.m.•12 views

CVE-2024-43253

Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Online Order for Clover: from n/a through 1.5.6...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•37 views

CVE-2024-43254

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

8.8CVSS0.00423EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/01 3:15 p.m.•18 views

CVE-2024-43254

Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Online Order for Clover: from n/a through 1.5.6...

8.8CVSS5.8AI score0.00423EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•63 views

CVE-2024-43253

CVE-2024-43253 describes a Missing Authorization vulnerability in the WordPress plugin “Smart Online Order” for Clover (Zaytech). The issue allows accessing functionality not properly constrained by ACLs. Affected range: Clover Online Orders from n/a through 1.5.6. Public references indicate a hi...

9.8CVSS5.9AI score0.00617EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/11/01 2:17 p.m.•79 views

CVE-2024-43254

CVE-2024-43254 affects the WordPress plugin Clover Online Orders (Smart Online Order for Clover). The connected docs identify a Missing Authorization issue due to misconfigured access control in Smart Online Order for Clover up to version 1.5.6. The Wordfence/CVE entries note the vulnerability as...

8.8CVSS5.9AI score0.00423EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder